Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3428395260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3428395260.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_3428395260
-
Size
276KB
-
MD5
00ad0928046d35e9192f36b9b9f960ee
-
SHA1
2c9efdc59e3698b159a8d8260f8ca46813d725da
-
SHA256
02bdc6986d19d0b3941bcae4f37fa59122ebdd0eb2db199a8c1df72bb59f46d3
-
SHA512
a123d9a1772b918d08e73bac4f56ef59220bf771fc012f59b6cdb668a72606f6859e79f036979400788ccf76427fdadc3f967c7f72fe46c799dc6f7b672362d0
-
SSDEEP
6144:lmz45irX5EUuBYObmUTtoyHVIJARm03loBQdSVXu:lmsCX5uBtyUTtoQIaRm0lpdSV
Malware Config
Signatures
Files
-
malware_smoke_3428395260.exe windows x86
e58fdf96b38e2cccf9fd6c2863fc9d64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
FindFirstChangeNotificationW
GetNamedPipeHandleStateW
GetOverlappedResult
FillConsoleOutputCharacterW
GetQueuedCompletionStatus
TerminateProcess
GetCurrentProcessId
GetVersionExA
EnumDateFormatsA
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsA
VirtualLock
WriteProfileStringA
VerifyVersionInfoA
SetProcessPriorityBoost
GetPriorityClass
GetCompressedFileSizeW
FindNextVolumeMountPointW
OutputDebugStringW
GetWriteWatch
WriteConsoleInputA
GetConsoleTitleA
SetComputerNameExW
GetTimeZoneInformation
LoadLibraryW
GetSystemDirectoryW
GetDriveTypeA
GetModuleHandleA
LocalAlloc
GetShortPathNameA
ZombifyActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
ReleaseActCtx
FindResourceA
FormatMessageA
GetModuleFileNameA
CreateJobObjectW
EnterCriticalSection
SetFirmwareEnvironmentVariableA
GetDllDirectoryW
GetExitCodeThread
LoadLibraryA
WritePrivateProfileStringA
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
UpdateResourceW
InterlockedDecrement
HeapValidate
_hwrite
GetStartupInfoW
DisconnectNamedPipe
GetCPInfoExA
GetSystemWow64DirectoryW
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceA
InterlockedExchangeAdd
GetLastError
FreeLibraryAndExitThread
GetStringTypeExW
GetConsoleAliasesLengthA
DeleteVolumeMountPointA
FatalAppExitA
SetSystemTime
OpenFileMappingW
lstrcmpA
SetConsoleCursorPosition
SetDefaultCommConfigA
GetSystemWindowsDirectoryA
GetACP
CreateActCtxW
GetMailslotInfo
GetConsoleAliasW
_lwrite
GetDiskFreeSpaceExA
DefineDosDeviceW
EnumResourceTypesA
lstrlenW
GetLongPathNameW
CreateJobSet
WriteConsoleA
VirtualProtect
ReadConsoleOutputW
SuspendThread
BuildCommDCBW
GetHandleInformation
GetComputerNameW
WritePrivateProfileSectionA
TryEnterCriticalSection
GetPrivateProfileSectionNamesA
CopyFileW
GetVolumePathNameA
GetConsoleMode
HeapWalk
ResetEvent
ReadProcessMemory
GetProcAddress
ChangeTimerQueueTimer
InterlockedCompareExchange
MoveFileA
GetCommMask
SetFileShortNameA
VerLanguageNameW
FreeEnvironmentStringsA
EnumDateFormatsExW
GetSystemWindowsDirectoryW
GetProfileStringA
GlobalGetAtomNameW
SetComputerNameW
GetConsoleAliasesA
CreateMailslotW
EnumDateFormatsW
SetConsoleOutputCP
MoveFileWithProgressA
GetFileInformationByHandle
GetLocalTime
FoldStringA
CallNamedPipeW
GetConsoleAliasExesLengthA
CopyFileExW
OpenSemaphoreA
GetModuleHandleExW
WriteConsoleOutputCharacterW
FindActCtxSectionStringW
GetTickCount
GetUserDefaultLangID
LocalLock
FindFirstVolumeW
GetFileTime
lstrcatW
OpenWaitableTimerA
EnumResourceNamesA
OpenFileMappingA
GetFileType
UnregisterWait
RaiseException
lstrcpynW
GetFullPathNameA
SetThreadPriority
ReadConsoleA
CreateFileW
GetDateFormatA
DeactivateActCtx
GetConsoleAliasExesW
SetCurrentDirectoryW
GetBinaryTypeW
GetFileAttributesA
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
GetModuleHandleW
ExitProcess
DeleteFileA
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
SetStdHandle
GetConsoleOutputCP
ReadFile
CloseHandle
CreateFileA
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 41.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gili Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zec Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wopilu Size: 512B - Virtual size: 34B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ